{"action":"Upgrade github.com/cilium/cilium to 1.14.16 or later.","affected":[{"fixed":"1.14.16","introduced":"1.14.0"},{"fixed":"1.15.10","introduced":"1.15.0"}],"component":"github.com/cilium/cilium","cve_ids":["CVE-2024-47825"],"ecosystem":"Go","epss":0.00397,"exploited":false,"fixed_versions":["1.14.16","1.15.10"],"ghsa_id":"GHSA-3wwx-63fv-pfq6","id":"tcs_01M5KG5P0N79B378B33B1MY7GA","modified_at":"2026-02-04T02:59:31.711511Z","published_at":"2024-10-28T15:20:02Z","references":["https://osv.dev/vulnerability/GO-2024-3208","https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6","https://nvd.nist.gov/vuln/detail/CVE-2024-47825","https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45","https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GO-2024-3208","url":"https://osv.dev/vulnerability/GO-2024-3208"},{"source":"nvd","source_id":"CVE-2024-47825","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47825"}],"summary":"Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium"}